CISA KEV 정보
| 취약점명 | Cisco IOS Software Resource Management Errors Vulnerability |
|---|---|
| 설명 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition. |
| 조치사항 | Apply updates per vendor instructions. |
| 랜섬웨어 캠페인 악용 | Unknown |
| CWE | CWE-399 |
| 등록일 (KEV) | 2022-03-03 |
| 조치 기한 | 2022-03-17 |
| 추가 참고 | https://nvd.nist.gov/vuln/detail/CVE-2018-0161 |
NVD 상세 정보
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:HAV:N/AC:M/Au:S/C:N/I:N/A:C설명: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541.
CWE: CWE-399
참조
- http://www.securityfocus.com/bid/103573 [Broken Link, Third Party Advisory, VDB Entry]
- http://www.securitytracker.com/id/1040589 [Broken Link, Third Party Advisory, VDB Entry]
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp [Mitigation, Vendor Advisory]
- http://www.securityfocus.com/bid/103573 [Broken Link, Third Party Advisory, VDB Entry]
- http://www.securitytracker.com/id/1040589 [Broken Link, Third Party Advisory, VDB Entry]
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp [Mitigation, Vendor Advisory]
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0161 [US Government Resource]
This product uses the NVD API but is not endorsed or certified by the NVD.